infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

clarify comments about what the checks for a deceitful UA are doing 

git-svn-id: file:///home/svn/framework3/trunk@9054 4d416f70-5f16-0410-b530-b9f4589650da
unstable
James Lee 2010-04-12 04:44:33 +00:00
parent 548e242e75
commit 6507c4fcea
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/rex/exploitation/javascriptosdetect.rb
View File

@ -402,9 +402,13 @@ function getVersion(){
// end navigator.buildID checks
// Verify whether the ua string is lying by checking the major version
// number against what we detected using known objects above. If it
// Verify whether the ua string is lying by checking if it contains
// what we detected using known objects above as a substring. If it
// appears to be truthful, then use its more precise version number.
//
// XXX: This should probably check only the first 2 sections of the
// version number so that things like "3.5.0" don't cause false
// positives.
version = searchVersion("Firefox", navigator.userAgent);
if (version && version.substr(0,ua_version.length) == ua_version) {
// The version number will end with a space or end of line, so strip